General

  • Target

    1e7aa2c63467920e1f1ca449952e411e273dba0923d8513e840354e314cd463f.exe

  • Size

    164KB

  • MD5

    50b8466f02b4d7d9f758d9edcbc1a96e

  • SHA1

    c643de3f4c9369a84d2a36ede71bd9ad4893442a

  • SHA256

    1e7aa2c63467920e1f1ca449952e411e273dba0923d8513e840354e314cd463f

  • SHA512

    d166d468f81dcfd68b64f7da8ac8e645eeb16c1359bb0bb122e0a1331e234bafbabbbc0febec61d6f119e7a1172c1050fe47b11702d0bf892f67c14bca43391b

  • SSDEEP

    3072:Y5XVv642sBaDVSW3nkuDV3cLtZK7gq9bBRkZ4zuuM172i:Y5XVv642tX3nk+xkD2bUMm1

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5515611206:AAEcQSX8hXHOAxSYr8KUdLxGF5eqw4FRXoA/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e7aa2c63467920e1f1ca449952e411e273dba0923d8513e840354e314cd463f.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections